Branch Virtualization The Evolving NFV Landscape

Transcription

1

2 Branch Virtualization The Evolving NFV Landscape Matt Bolick - Technical Marketing Engineer BRKARC-2014

3 Agenda Branch Service Virtualization Motivations UCS E-Series Open Service Containers Enterprise NFV Enterprise Network Compute System

4 The Lean Branch Office Balancing IT Efficiency and User Experience Full-Service Branch Data Center/ Cloud WAN/Internet Branch Office All servers local No reliance on WAN Complexity, high cost Service guarantees BRKARC Cisco and/or its affiliates. All rights reserved. Cisco Public 5

5 The Lean Branch Office Balancing IT Efficiency and User Experience Serverless Branch Full-Service Branch Data Center/ Cloud Data Center/ Cloud Branch Office WAN/Internet Branch Office WAN/Internet No local servers Full reliance on WAN Simplicity, low cost No service guarantees All servers local No reliance on WAN Complexity, high cost Service guarantees BRKARC Cisco and/or its affiliates. All rights reserved. Cisco Public 6

6 The Lean Branch Office Balancing IT Efficiency and User Experience Serverless Branch Lean Branch Full-Service Branch Data Center/ Cloud Data Center/ Cloud Data Center/ Cloud Branch Office WAN/Internet Branch Office WAN/Internet Branch Office WAN/Internet No local servers Full reliance on WAN Simplicity, low cost No service guarantees 4-5 local servers Full reliance on WAN except for mission-critical applications All servers local No reliance on WAN Complexity, high cost Service guarantees BRKARC Cisco and/or its affiliates. All rights reserved. Cisco Public 7

7 The Lean Branch Office Balancing IT Efficiency and User Experience Serverless Branch Lean Branch Full-Service Branch Data Center/ Cloud Data Center/ Cloud Data Center/ Cloud Branch Office WAN/Internet Branch Office WAN/Internet Branch Office WAN/Internet No local servers Full reliance on WAN Simplicity, low cost No service guarantees 4-5 local servers Full reliance on WAN except for mission-critical applications All servers local No reliance on WAN Complexity, high cost Service guarantees BRKARC Cisco and/or its affiliates. All rights reserved. Cisco Public 8

8 Motivation for Virtualization in the Branch Physical Branch Virtualized Branch Long, Expensive Roll-Outs Under Utilization Inflexibility Service Agility Efficient Resource Utilization Opex Savings BRKARC Cisco and/or its affiliates. All rights reserved. Cisco Public 9

9 NFV Benefits Enterprise Service Provider Reduction of network elements to manage & deploy Increase revenue by accelerating delivery of new and differentiated services Service Elasticity & Automated Network Operations Reduce upfront Cap-Ex Improve Asset Utilization Operational efficiencies through virtualization Provide on-demand service delivery through customer self-service portals Deployment of best-of-breed Reduce Op-Ex & time-to-service from months to weeks BRKARC Cisco and/or its affiliates. All rights reserved. Cisco Public 10

10 Levels of Network Function Virtualization Integrated Services ISR4K + Service Containers (KVM/LXC) Native ISR Services + NFV Flexibility Reliability with Open Service Hosting Integrated Services with Dedicated Server ISR4K + UCS C/E Series Native ISR Services + NFV Hardware Separate Administration Domains Fully Virtualized Branch General Purpose X86 Compute Full Service Virtualization Best-of-Breed Service Options 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public

11 UCS E-Series

12 Cisco End-to-End Solution Cisco UCS B-Series and C-Series for Data Center; UCS E-Series for Branch Cisco UCS B- and C-Series This unified compute platform offers infrastructure consolidation in the data center. These servers offer innovative virtualization, memory, provisioning, I/O, and management capabilities. Cisco UCS E-Series Servers This residual compute platform offers all-in-one device convergence that facilitates centralization of branch applications into the data center. Data Center/Cloud WAN/Internet Branch Office Consolidate Infrastructure Centralize Applications Support User Experience Address WAN-induced performance, availability, and compliance challenges. Location-Suitable Form Factors, Consistent Device Management BRKARC Cisco and/or its affiliates. All rights reserved. Cisco Public 14

13 Scalability Cisco UCS E-Series DC-class Servers Intel Ivy Bridge Intel Ivy Bridge Cisco UCS E140S Service module VMware, Hyper-V, Citrix certified Intel E3 4 core processor 16GB DRAM Intel Broadwell Cisco UCS E160S Single-Wide Service module VMware, Hyper-V, Citrix certified Intel Broadwell 6 core processor 32GB DRAM USB 3.0 & 10Gb Interface Intel Ivy Bridge Cisco UCS E160D Double-Wide Service Module VMware, Hyper-V, Citrix certified Intel E5 6 core processor 96GB DRAM Cisco UCS E180D Double-Wide Service Module VMware, Hyper-V, Citrix certified Intel E5 8 core processor 96GB DRAM Performance BRKARC Cisco and/or its affiliates. All rights reserved. Cisco Public 15

14 Scalability Cisco UCS E-Series Network Compute Engine Cisco UCS EN120S Cisco UCS EN120E Enhanced HWIC Virtualization enabled Network compute applications - FirePower, vwaas Cisco UCS EN140N NIM network compute module Virtualization enabled Network compute applications - FirePower, vwaas Service module VMware and Hyper-V certified Network compute applications - FirePower, vwaas Supported on ISR-G2 Supported on ISR4000 Performance BRKARC Cisco and/or its affiliates. All rights reserved. Cisco Public 19

15 Cisco UCS E-Series Servers Support Model Hardware Support Provided by Cisco Cisco UCS E-Series hardware supported under ISR G2 SMARTnet at no additional cost Hypervisor and OS supported by hypervisor and OS vendor Hypervisor Cisco UCS E-Series Server Module ISR Supported by OS / hypervisor vendor Purchased separately Supported by Cisco SMARTnet Attached to ISR G2 BRKARC Cisco and/or its affiliates. All rights reserved. Cisco Public 21

16 KVM Hosting on IOS-XE Routers ISR 4K, ASR1K, CSR1Kv

17 Application Hosting Spectrum Different models for different application needs. Native Process Very Tight Integration Best Performance LXC Strict Kernel Requirements Good performance with some security Docker Emerging Industry Standard Future Support KVM Any OS Complete separation Linux host OS normally Type 2 hypervisor Type 1 Hypervisor Service Module Only VMWare, HyperV, Zen BRKARC Cisco and/or its affiliates. All rights reserved. Cisco Public 25

18 Application Hosting Spectrum Linux Containers Native Process Very Tight Integration Best Performance LXC Strict Kernel Requirements Good performance with some security Docker Emerging Industry Standard Future Support KVM Any OS Complete separation Linux host OS normally Type 2 hypervisor Type 1 Hypervisor Service Module Only VMWare, HyperV, Zen BRKARC Cisco and/or its affiliates. All rights reserved. Cisco Public 26

19 Application Hosting Spectrum Cisco Service Containers Native Process Very Tight Integration Best Performance LXC Strict Kernel Requirements Good performance with some security Docker Emerging Industry Standard Future Support KVM Any OS Complete separation Linux host OS normally Type 2 hypervisor Type 1 Hypervisor Service Module Only VMWare, HyperV, Zen BRKARC Cisco and/or its affiliates. All rights reserved. Cisco Public 27

20 Application Hosting Spectrum Open Service Containers Native Process Very Tight Integration Best Performance LXC Strict Kernel Requirements Good performance with some security Docker Emerging Industry Standard Future Support KVM Any OS Complete separation Linux host OS normally Type 2 hypervisor Type 1 Hypervisor Service Module Only VMWare, HyperV, Zen BRKARC Cisco and/or its affiliates. All rights reserved. Cisco Public 28

21 IOS-XE Software Architecture IOSd Control Plane Cisco Apps (WAAS, Snort) KVM/LXC Customer and 3 rd Party Applications Virtual Ethernet Linux OS Platform-Specific Data Plane AppNav Internal Services Blade (UCS E-Series) External Services Blade (UCS) BRKARC Cisco and/or its affiliates. All rights reserved. Cisco Public 31

22 Cisco ISR 4400 Series Architecture Service containers live here: 75% CPU Control Plane (1 core) and Services Plane (3 cores) IOS-XE 25% CPU Data Plane (6 or 10 cores) FPGE Service Container KVM - Hypervisor Service Plane (control plane CPU) Multigigabit Fabric NIM ISC SM-X BRKARC Cisco and/or its affiliates. All rights reserved. Cisco Public 32

23 Cisco WAAS Improve application performance and user experience WAAS Appliance Application acceleration Virtual blades in branch offices Scalable platforms for range of deployments Virtual WAAS Application acceleration from Private/Virtual Private Cloud VMWare ESX/ESXi and UCS deployments Agile, elastic, multi-tenant deployment vcm: common virtualized management for physical/virtual WAAS ISR-WAAS on ISR 4K Integrated on platform Full Feature Parity Software on-demand provisioning No fork lift upgrade BRKARC Cisco and/or its affiliates. All rights reserved. Cisco Public 34

24 Introducing Product Overview Open source intrusion prevention system for real-time traffic analysis Lightweight threat defense for price sensitive customers Integrated in ISR 4K service container IPS/IDS functionality with an IOS IPS look and feel BRKARC Cisco and/or its affiliates. All rights reserved. Cisco Public 35

25 Network Edge Private/Public Network Security Management StealthWatch Learning Network-SLN SLN Control Agent SCA Admin Context ISE HQ ISE pxgrid PCAP/Honeypot Orchestration and interaction with remote DLAs Advanced visualizations Centralized policy Reputation IoCs ThreatGRID Distributed Learning Agent Branch 2 ISR DLA Branch 1 ISR DLA Data collection. Netflow, DPI (control and data plane, local states) Analytics and Learning Edge Mitigation programmed/autonomous (police, shape, recolor, redirect) etc.) G2 -> UCS-E blade 4K -> container-based BRKARC Cisco and/or its affiliates. All rights reserved. Cisco Public 37

26 Common Open KVM Use Cases Troubleshooting VM General purpose virtual machine with custom and open-source troubleshooting tools. (Wireshark, Speedtest, etc.) Network Functions Common network functions such as Print Server, Domain Controller, File Storage, etc. Analytics Network Analysis and Application Performance Monitoring without a dedicated probe. Device Customization Augment the capabilities of the host platform in some way. (Custom encryption, businessbased routing, specialized API interface) BRKARC Cisco and/or its affiliates. All rights reserved. Cisco Public 38

27 ThousandEyes View Across Internal and External Networks Data Center Hosting / SaaS Provider Internet Branch Consumers Enterprise Agents Cloud Agent 1 Network Ops: WAN, VoIP, DCs 2 Cloud Migration: SaaS and IaaS 3 App Delivery: Website, CDN, DNS, ISP 4 Internet Security: DNS, BGP, DDoS BRKARC Cisco and/or its affiliates. All rights reserved. Cisco Public 40

28 ThousandEyes Troubleshoot, Monitor, Resolve Hop-by-hop path visualization from monitoring agents to cloud hosted or internal services Actively monitor and troubleshoot any network including branch offices, data centers Visualize network and application performance to detect trends and anomalies BRKARC Cisco and/or its affiliates. All rights reserved. Cisco Public 41

29 CA Unified Infrastructure Management Unified IT Monitoring Providing Broad Coverage A unified view and architecture to manage your internal and external infrastructure. BIG DATA MONITOR MAINFRAME APPLICATION USER EXPERIENCE Predictive Analytics SLA Compliance Dashboards & Reporting Intelligent Alerts VIRTUALIZATION STORAGE CLOUD POWER & COOLING DATABASE NETWORK SERVER BRKARC Cisco and/or its affiliates. All rights reserved. Cisco Public 42

30 UIM Reference Architecture Virtual Image Requirements: Relay Hub: 1 CPU Quad Core, 8GB Memory. Redhat/CentOS 6 or 7. Polling Robot: 1 CPU Quad Core, 8GB Memory. Redhat/CentOS 6 or 7. UIM CORE UIM Portal UIM DB UIM Primary HUB Recommended Probe Technologies included with ISR UIM OVAs: CDM/RSP SNMPC UCS URL Response Net Connect DNS Response XenApp e2e appmon ISR 4400/4300 KVM KVM Relay Polling Hub Robot Location 1 Location 2 Location 3 ISR 4400/4300 KVM Relay Hub KVM Polling Robot ISR 4400/4300 KVM KVM Relay Polling Hub Robot Servers w/robots Network Infrastructure Servers w/robots Network Infrastructure Servers w/robots Network Infrastructure BRKARC Cisco and/or its affiliates. All rights reserved. Cisco Public 44

31 Ned.io Open Source Service Container Network Discovery, Operation and Management Open application built without any Cisco involvement. Terrific option for low-footprint branch management. BRKARC Cisco and/or its affiliates. All rights reserved. Cisco Public 45

32 Open Service Container Support Model IOSd Control Plane WAAS Linux OS KVM/LXC Customer and 3 rd Party Applications Virtual Ethernet Cisco Support: Call TAC and they ll help you out. Platform-Specific Data Plane BRKARC Cisco and/or its affiliates. All rights reserved. Cisco Public 62

33 Open Service Container Support Model IOSd Control Plane WAAS KVM/LXC Customer and 3 rd Party Applications Virtual Ethernet Third Party & Community Support: TAC will redirect you. Linux OS Platform-Specific Data Plane Cisco Devnet Provides: Community support for developers Documentation Developer Tools Access to Cisco Engineers Sample open source VMs Share open source projects Examples from Cisco Engineers BRKARC Cisco and/or its affiliates. All rights reserved. Cisco Public 63

34 More Information Cisco DevNet Online community for developers Direct access to Cisco Engineers and Product Teams Repository of how-to guides, best practices and sample code This will be the primary source for Service Container information and sample OVAs Due to Cisco support requirements, VMs will not be posted to Cisco.com directly. Keep an eye out for a Service Container Hackathon with fabulous prizes! BRKARC Cisco and/or its affiliates. All rights reserved. Cisco Public 65

35 Links WAY MORE INFO: What the Heck is a Service Containers? (blog) An Introduction to Service Containers (Presentation) Fundamentals of Service Containers (Techwise Video) Wireshark on the Catalyst Virtual Service Container Config Guide (NXOS &IOSXE) BRKARC Cisco and/or its affiliates. All rights reserved. Cisco Public 66

36 Enterprise NFV

37 What We Are Announcing DNA Advisor Program Learn Measure Assess DNA Security DNA Services Advisory Implementation Managed Technical DNA Virtualization DNA Virtualization DNA Security ENCS NGFWv 3 rd Party Partners TrustSec ISE Umbrella Wifi Firepower 2100 BRKARC Cisco and/or its affiliates. All rights reserved. Cisco Public 69

38 Different Solutions for Different Folks Cisco Enterprise NFV and Secure Agile Exchange Enterprise NFV Designed for Branch Environments Primarily Turnkey Solutions Familiar Look-and-Feel to existing branch hardware, and interfaces. ENCS 5400 looks like an ISR Secure Agile Exchange Co-Location and Data Center Primarily Bespoke Deployments Ethernet only with a generic server architecture. CSP 2100 looks like a UCS-C BRKARC Cisco and/or its affiliates. All rights reserved. Cisco Public 70

39 DNA Virtualization for the Branch Building on Enterprise NFV Central Orchestration and Management Rich Network Services NEW Hardware optimized for Enterprise NFV Enterprise Network Compute System(ENCS) APIC-EM ESA Cisco & 3 rd party VNFs Consistent services you can trust SW Intelligence over HW Platform Freedom of Choice Simple to design, provision and manage NFV Infrastructure Software (NFVIS) ISR 4K + UCS-E, UCS-C, ENCS Flexibility and freedom of choice BRKARC Cisco and/or its affiliates. All rights reserved. Cisco Public 72

40 Cisco Enterprise NFV Network services in in minutes, on any platform BRKARC Cisco and/or its affiliates. All rights reserved. Cisco Public 73

41 Enterprise Service Automation Seamless integration with APIC-and Prime Infrastructure Create branch architecture profiles based on Business Intent Intent derived by intelligent template selection based on CVD questions Internet access characteristics Bandwidth Wireless ESA proposes suitable templates BRKARC Cisco and/or its affiliates. All rights reserved. Cisco Public 75

42 Best-of-breed Trusted Services from Cisco Consistent Software Across Physical and Virtual New! ISRv High performance Rich features End-to-end support Proven software ASAv / FTDv vwaas vwlc Comprehensive protection Full data-center-class featured functionality Designed for NFV Cost-effective with NFV Leader in Gartner MQ #1 unit shipped Superior caching with Akamai Connect Survivability and scale Consistency across the data center and switches Built for small and medium branches BRKARC Cisco and/or its affiliates. All rights reserved. Cisco Public 76

43 ISRv and CSR Integrated Services Router - Virtual Cloud Services Router Packaged for NFVIS Branch-Specific Features Branch-Specific Pricing Look-and-feel of an ISR 4000 Not available separately Cloud and VDC Deployments Aggregation Use-Cases Flexible Pricing & Packaging Virtual ASR 1000 Series Available on multiple platforms BRKARC Cisco and/or its affiliates. All rights reserved. Cisco Public 77

44 Packaged for Branch Network Services Enterprise NFV Infrastructure Software (NFVIS) Network Hypervisor Enables segmentation of virtual networks Abstract CPU, memory, storage resources VNF deployment and update VNF status and monitoring Zero Touch Deployment Automatic connection to PnP server Secure connection to the orchestration system Easy day 0 provisioning Life Cycle Management Provisioning and launch of VNFs Failure and recovery monitoring Stop and restart services Dynamically add and remove services Service Chaining External connectivity and to other services Multiple service access options No hardware offload with UCS Open API Programmable API for service orchestration REST and NETCONF API BRKARC Cisco and/or its affiliates. All rights reserved. Cisco Public 78

45 Freedom of Choice Cisco Intelligent Branch Traditional Enterprise NFV Physical Router Physical Router Virtual Services Virtual Router Virtual Services Virtual Router Virtual Services Cisco 4000 Series ISR 4000 Series ISR + UCS E-Series Enterprise Network Compute System (ENCS) UCS C-Series Cisco ONE Access to Ongoing Innovation License Portability Investment Protection BRKARC Cisco and/or its affiliates. All rights reserved. Cisco Public 82

46 ENCS 5400 Series Integrated Power Supply GB DRAM 6, 8, or 12-Core Intel Xeon-D Dedicated Board Management Controller Optional Hardware RAID Controller Internal M.2 Storage 8 Integrated LAN Ports with Optional UPOE USB 3.0 Storage Network Interface Module for LTE & legacy WAN 2 HDD or SSD RAID 0 & 1 Hardware Acceleration for VM Traffic (SR-IOV) 2 Onboard Gigabit Ethernet ports with SFP Optional Hardware Crypto Module BRKARC Cisco and/or its affiliates. All rights reserved. Cisco Public 83

47 ENCS 5400 Series - Chassis Options CPU Clocking GHz VNFs Throughput ratio ENCS Core ENCS Core ENCS Core 0 ISRv 2 1 Note: No hard limit on number of VNFs. CPU oversubscription is not recommended for production environments. BRKARC Cisco and/or its affiliates. All rights reserved. Cisco Public 84

48 Cisco Services for Enterprise NFV Cisco Enterprise NFV Advise and Implement Service NEW Cisco Solution Support for Enterprise NFV NEW Customized Design Primary Point of Contact Validated Solution Deep Solution Expertise Accelerated Adoption Reduced Risk Coordinates Between Key Vendors Manages Case to Resolution BRKARC Cisco and/or its affiliates. All rights reserved. Cisco Public 85

49 Customer Story Retail Banking 200 Locations Multiple Applications & Functions Multiple Internal Groups Enterprise NFV Goals: 1. Refresh 2. Consolidate 3. Flexibility 4. Bonus: Future-proof 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public

50 Customer Story Large Retail Chain 500+ Locations Evolving Applications & Functions Opex Focused Enterprise NFV Goals: 1. Simplify Deployments with PnP & Template Provisioning 2. Longevity 3. Flexibility 4. OpEx Savings

51 Customer Story Managed Service Provider Hundreds of End Customers Large Service Portvolio Long Time to Deploy New Services Enterprise NFV Goals: 1. Accelerate Service Adoption 2. OpEx Savings 3. API Integration BRKARC Cisco and/or its affiliates. All rights reserved. Cisco Public 89

52 Why Cisco for Enterprise NFV Best in Class NFV, SD-WAN and Physical & Virtual Platforms Flexibility at Every Level Expertise Hardware & Software Designed to work together by the Experts in Branch Networking Services to Tackle any Problem BRKARC Cisco and/or its affiliates. All rights reserved. Cisco Public 90

53 For More Information Enterprise NFV How-To Videos Enterprise Routing TME Pirate Video Enterprise NFV on Cisco.com Cisco and/or its affiliates. All rights reserved. Cisco Public

54 Enterprise Networks Joins Customer Connection Program Virtual Customer User Group Program 19,000+ Members Strong Who can join: Cisco customers & partners Private online community to connect customers with peers & Cisco s Enterprise Networking product teams Monthly technical & roadmap briefings via WebEx Opportunities to influence product direction New member thank you gift * & badge ribbon when you join in the Digital Arcade Other CCP tracks: Security & Collaboration Join in World of Solutions Digital Arcade Customer Connection stand Learn about CCP and Join New member thank-you gift* Customer Connection Member badge ribbon Join Online Come to Digital Arcade to get your new member gift* and ribbon * While supplies last BRKARC Cisco and/or its affiliates. All rights reserved. Cisco Public 92

55 Complete Your Online Session Evaluation Please complete your Online Session Evaluations after each session Complete 4 Session Evaluations & the Overall Conference Evaluation (available from Thursday) to receive your Cisco Live T-shirt All surveys can be completed via the Cisco Live Mobile App or the Communication Stations Don t forget: Cisco Live sessions will be available for viewing on-demand after the event at CiscoLive.com/Online BRKARC Cisco and/or its affiliates. All rights reserved. Cisco Public 93

56 Continue Your Education Demos in the Cisco campus Walk-in Self-Paced Labs Lunch & Learn Meet the Engineer 1:1 meetings Related sessions BRKARC Cisco and/or its affiliates. All rights reserved. Cisco Public 94

57 Q & A

58 Thank You

59